Hacker & Security News

Hacker & Security News

@hacker.at.thenote.app

#hacker and #security news from Hacker News, LifeHacker, Security Boulevard and others. Our other projects: #macos, #ios and #android apps for notes TheNote.app

1.3K followers6 following56.6K posts

Hacker & Security News
@hacker.at.thenote.app

Colare Raises $2.5M to Staff the $35.6B Defense Tech Wave Colare raised $2.5M from Afore, Garage and Acadian for simulation-based assessments that let aerospace and hardware teams test engineers before interviews. #hackernews #news

hackernoon.comColare Raises $2.5M to Staff the $35.6B Defense Tech WaveColare raised $2.5M from Afore, Garage and Acadian for simulation-based assessments that let aerospace and hardware teams test engineers before interviews.
Hacker & Security News
@hacker.at.thenote.app

Understanding General and Sophisticated Invalid Traffic in Digital Advertising Learn how invalid traffic, bots, and ad fraud affect digital campaigns, and how advertisers can identify suspicious activity and protect their budgets. #hackernews #news

hackernoon.comUnderstanding General and Sophisticated Invalid Traffic in Digital AdvertisingLearn how invalid traffic, bots, and ad fraud affect digital campaigns, and how advertisers can identify suspicious activity and protect their budgets.
Hacker & Security News
@hacker.at.thenote.app

AI-Generated Fake Bank Calls and NFC App Enabled €380,000 Fraud, Dutch Police Say Dutch police arrest two men over AI-voiced bank fraud that allegedly used a fake app to steal card data from 170 victims, causing €380,000 in losses. Rotterdam police have arrested two men over a ne… #hackernews #news

securityaffairs.comAI-Generated Fake Bank Calls and NFC App Enabled €380,000 Fraud, Dutch Police SayDutch police arrest two men over AI-voiced bank fraud that allegedly used a fake app to steal card data from 170 victims, causing €380,000 in losses. Rotterdam police have arrested two men over a new type of bank fraud that used AI-generated phone calls, a fake banking app, and NFC technology to steal bank card […]
Hacker & Security News
@hacker.at.thenote.app

Researchers Uncover Rentable Android Spyware uCreater Targeting WeChat and Telegram uCreater is Android spyware disguised as trusted apps, stealing credentials, messages and wallet data through a rentable platform. uCreater is a rentable Android spyware platform that hides inside… #hackernews #news

securityaffairs.comResearchers Uncover Rentable Android Spyware uCreater Targeting WeChat and TelegramuCreater is Android spyware disguised as trusted apps, stealing credentials, messages and wallet data through a rentable platform. uCreater is a rentable Android spyware platform that hides inside repackaged legitimate apps, targeting messaging services and mobile wallets. Its YingGai framework can intercept one-time passwords, steal account and chat data, collect contacts, manipulate sessions and spoof […]
Hacker & Security News
@hacker.at.thenote.app

PHP2Shell: Suspected North Korean campaign targets 216 vulnerable PHP hosts Cyfirma links PHP2Shell scans of 216 vulnerable hosts to a suspected North Korean campaign using AI to rank public exploits. On October 21, PHP released emergency patches for two critical vulnerabilities,… #hackernews #news

securityaffairs.comPHP2Shell: Suspected North Korean campaign targets 216 vulnerable PHP hostsCyfirma links PHP2Shell scans of 216 vulnerable hosts to a suspected North Korean campaign using AI to rank public exploits. On October 21, PHP released emergency patches for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both rated 9.2 on the CVSS scale. The flaws affect all PHP versions that handle web requests. The vulnerable code dates […]
Hacker & Security News
@hacker.at.thenote.app

Best Inference Servers for Running Open-Source Models in Production Meta Description: Compare vLLM, SGLang, TensorRT-LLM, LMDeploy, and llama.cpp to choose the right inference server for production LLMs and AI agents. #llama #llm #meta

hackernoon.comBest Inference Servers for Running Open-Source Models in ProductionMeta Description: Compare vLLM, SGLang, TensorRT-LLM, LMDeploy, and llama.cpp to choose the right inference server for production LLMs and AI agents.
Hacker & Security News
@hacker.at.thenote.app

eMudhra to Exit SSL/TLS Market After 8 CA Keys Found Easily Guessable eMudhra will leave the global SSL/TLS certificate market after eight intermediate CA private keys were found easily guessable, prompting browser distrust actions. #hackernews #news

hackread.comeMudhra to Exit SSL/TLS Market After 8 CA Keys Found Easily GuessableeMudhra will leave the global SSL/TLS certificate market after eight intermediate CA private keys were found easily guessable, prompting browser distrust actions.
Hacker & Security News
@hacker.at.thenote.app

⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More This2Shell, That2Shell, Everything2Shell. That's pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere. Hackers are scanni… #hackernews #news

thehackernews.com⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and MoreThis2Shell, That2Shell, Everything2Shell. That's pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere. Hackers are scanning for targets, some flaws are already being used in attacks, and security teams have more urgent patches than they can keep up with. And that's not even the full story. A leaked key led to a software supply-chain
Hacker & Security News
@hacker.at.thenote.app

When an AI Agent Is the Incident, the Identity Record Is the Evidence A new NIST, CISA, and NSA guide treats runaway agents as incidents to be rehearsed. The hard part of the response is answering whose authority the agent used, and that answer has to exist before the incident do… #hackernews #news

bleepingcomputer.comWhen an AI Agent Is the Incident, the Identity Record Is the EvidenceA new NIST, CISA, and NSA guide treats runaway agents as incidents to be rehearsed. The hard part of the response is answering whose authority the agent used, and that answer has to exist before the incident does. [...]
Hacker & Security News
@hacker.at.thenote.app

Chinese man extradited for role in $36 million cryptocurrency scam A Chinese national was arraigned in California after being extradited from the Netherlands for his alleged involvement in a cryptocurrency investment scam that stole nearly $37 million from 174 victims in the Unit… #hackernews #news

bleepingcomputer.comChinese man extradited for role in $36 million cryptocurrency scamA Chinese national was arraigned in California after being extradited from the Netherlands for his alleged involvement in a cryptocurrency investment scam that stole nearly $37 million from 174 victims in the United States. [...]
Hacker & Security News
@hacker.at.thenote.app

Kali Linux 2026.3 ships kernel 7.1.5, brings wardriving to the TicWatch Pro 3 The Kali Linux team released version 2026.3 after overhauling the public build scripts it uses to produce every official image. The refreshed scripts share the same features, command-line arguments and,… #hackernews #news

helpnetsecurity.comKali Linux 2026.3 ships kernel 7.1.5, brings wardriving to the TicWatch Pro 3The Kali Linux team released version 2026.3 after overhauling the public build scripts it uses to produce every official image. The refreshed scripts share the same features, command-line arguments and, where possible, the same layout, so a pipeline written against an older script may need edits. Builds can now run in a container Each refreshed script ships a build-in-container.sh that detects whether you run Docker or Podman, creates a build container and runs the build …
Hacker & Security News
@hacker.at.thenote.app

Security pros reckon the biggest AI risk comes with an employee badge Employees pasting company data into AI tools worry security teams more than AI-powered attacks do. Most-concerning risks of AI agents (Source: O’Reilly) AI-generated phishing, the attack they run into most ofte… #hackernews #news

helpnetsecurity.comSecurity pros reckon the biggest AI risk comes with an employee badgeEmployees pasting company data into AI tools worry security teams more than AI-powered attacks do. Most-concerning risks of AI agents (Source: O’Reilly) AI-generated phishing, the attack they run into most often, made the list of top concerns for only a quarter of the 209 security professionals O’Reilly surveyed in September. Mike Loukides, VP of content strategy at O’Reilly Media, believes the fear of AI wiping out humanity distracts from harm happening today. “We don’t need …
Hacker & Security News
@hacker.at.thenote.app

We shouldn't be surprised about the PHPocalypse, as the internet is built on sticks and glue What better way to celebrate Cybersecurity Awareness Month than warning that three-quarters of the web is about to be set on fire? #hackernews #news

theregister.comWe shouldn't be surprised about the PHPocalypse, as the internet is built on sticks and glueWhat better way to celebrate Cybersecurity Awareness Month than warning that three-quarters of the web is about to be set on fire?
Hacker & Security News
@hacker.at.thenote.app

FSB Report Highlights Cross-Border Insolvency Risks in Stablecoin Markets The FSB warns stablecoins remain untested in a crisis and that shared issuer structures could leave holders facing unclear insolvency rules. #hackernews #news

hackernoon.comFSB Report Highlights Cross-Border Insolvency Risks in Stablecoin MarketsThe FSB warns stablecoins remain untested in a crisis and that shared issuer structures could leave holders facing unclear insolvency rules.
Hacker & Security News
@hacker.at.thenote.app

Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox intended to contain it, the project's… #hackernews #news

thehackernews.comTwo Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape SandboxesTwo critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox intended to contain it, the project's maintainers say. An attacker would first need a vulnerable Wasmtime build to compile a module they control, and one of the flaws affects only ARM64 systems. Fixed versions were released on
Hacker & Security News
@hacker.at.thenote.app

Security Teams and AI Tools: Why Executives Won’t Adopt What They Can’t Control Executives need visibility into workplace AI, clear data controls and limits on agent access before approving wider adoption. Here’s what businesses need in place. #hackernews #news

hackread.comSecurity Teams and AI Tools: Why Executives Won’t Adopt What They Can’t ControlExecutives need visibility into workplace AI, clear data controls and limits on agent access before approving wider adoption. Here’s what businesses need in place.
Hacker & Security News
@hacker.at.thenote.app

Stop Ignoring the Crease: Ship Your iOS App for iPhone Duo Before the April 2027 Deadline iPhone Duo for iOS developers: the new SDK and APIs, and what broke in a real app adapted on the simulator before the device went on sale. #hackernews #news

hackernoon.comStop Ignoring the Crease: Ship Your iOS App for iPhone Duo Before the April 2027 DeadlineiPhone Duo for iOS developers: the new SDK and APIs, and what broke in a real app adapted on the simulator before the device went on sale.
Hacker & Security News
@hacker.at.thenote.app

AI coding agents fall for malicious instructions planted in the Downloads folder A file that a website saves to the Downloads folder without approval can trick AI coding agents into installing a malicious npm package or handing over the user’s login token when they’re opened in t… #hackernews #news

helpnetsecurity.comAI coding agents fall for malicious instructions planted in the Downloads folderA file that a website saves to the Downloads folder without approval can trick AI coding agents into installing a malicious npm package or handing over the user’s login token when they’re opened in that folder, Forever Security has found. The file is called AGENTS.md, a plain text document developers place in a project folder with instructions for coding agents, the AI tools that write and run code on their own. One turned up on …
Hacker & Security News
@hacker.at.thenote.app

Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses Every SOC struggles with a pile of alerts. Very few of those alerts explain how an attack started or how it progressed. Network data, like that from a network detection and response (NDR) platform, connects… #hackernews #news

thehackernews.comBetween alerts: What Attackers Do in the Spaces Ordinary Detection MissesEvery SOC struggles with a pile of alerts. Very few of those alerts explain how an attack started or how it progressed. Network data, like that from a network detection and response (NDR) platform, connects individual alerts into one timeline, and it feeds the defensive systems that can tie all events together into one coordinated view. SOC teams often first see the shape of an intrusion
Hacker & Security News
@hacker.at.thenote.app

Fortinet patches critical FortiOS flaws found with AI help Fortinet rolled out security hardening updates for FortiOS, FortiManager, FortiAnalyzer, FortiMail, and FortiAuthenticator last week, but is keeping the details about the fixed vulnerabilities under wraps until November 1… #hackernews #news

helpnetsecurity.comFortinet patches critical FortiOS flaws found with AI helpFortinet rolled out security hardening updates for FortiOS, FortiManager, FortiAnalyzer, FortiMail, and FortiAuthenticator last week, but is keeping the details about the fixed vulnerabilities under wraps until November 10, 2026. The vulnerabilities were uncovered with the help of AI models and validated by humans, Fortinet’s Chief Information Security Officer Carl Windsor explained in the advance announcement. But attackers also have access to AI tools, he warned, and can use them to find vulnerabilities and build …
Hacker & Security News
@hacker.at.thenote.app

Bias in Qwen3-Coder Model Interesting research: TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: tell the model who the code is for, and the security of what it writes changes. For the first time, we showed that this vulnerability l… #hackernews #news

schneier.comBias in Qwen3-Coder ModelInteresting research: TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: tell the model who the code is for, and the security of what it writes changes. For the first time, we showed that this vulnerability lives in the model’s weights, and that removing the model’s CCP alignment removes it. One word tilts the code against Americans. Ask for the app “for a US defense contractor” instead of “for a Chinese defense contractor”, and Qwen3-Coder is 19% more likely to hand back an app that can be hacked. ...
Hacker & Security News
@hacker.at.thenote.app

i'm 13 and i built a global hackathon for teens with almost no budget. here's how. At 13, I built a free global hackathon for teens from Hanoi with almost no budget. What worked, what failed, and how I found six sponsors. #hackernews #news

hackernoon.comi'm 13 and i built a global hackathon for teens with almost no budget. here's how.At 13, I built a free global hackathon for teens from Hanoi with almost no budget. What worked, what failed, and how I found six sponsors.
Hacker & Security News
@hacker.at.thenote.app

Cryptobanco Focuses on B2B Crypto Infrastructure as Stablecoin Payments Expand Cryptobanco is expanding its focus on B2B crypto payments with tools for bulk payouts, wallet management, transaction monitoring and risk screening #hackernews #news

hackernoon.comCryptobanco Focuses on B2B Crypto Infrastructure as Stablecoin Payments ExpandCryptobanco is expanding its focus on B2B crypto payments with tools for bulk payouts, wallet management, transaction monitoring and risk screening
Hacker & Security News
@hacker.at.thenote.app

Anthropic details what stops Claude Duet from going rogue Anthropic has outlined the security and privacy protections behind Claude Duet, its proactive AI agent that can monitor connected accounts and complete tasks while users are away. The safeguards include approv… #anthropic #claude #hackernews

helpnetsecurity.comAnthropic details what stops Claude Duet from going rogueAnthropic has outlined the security and privacy protections behind Claude Duet, its proactive AI agent that can monitor connected accounts and complete tasks while users are away. The safeguards include approval requirements, checks for sensitive information and infrastructure that keeps credentials outside the model’s reach. Duet works through a cloud-based computer and browser to prepare briefings, draft messages and handle business tasks. The standalone app is available through a research preview waitlist for Pro and …
Hacker & Security News
@hacker.at.thenote.app

Kali Linux 2026.3 released with 6 new tools, desktop updates Kali Linux has released version 2026.3, its third release this year, featuring six new hacking tools, desktop environment improvements, refreshed build scripts, and more. [...] #hackernews #news

bleepingcomputer.comKali Linux 2026.3 released with 6 new tools, desktop updatesKali Linux has released version 2026.3, its third release this year, featuring six new hacking tools, desktop environment improvements, refreshed build scripts, and more. [...]
Hacker & Security News
@hacker.at.thenote.app

uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies of the two apps, researcher Ovi found. It only reaches people who in… #hackernews #news

thehackernews.comuCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat AccountsA rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies of the two apps, researcher Ovi found. It only reaches people who install one of these tampered copies, spread outside the official app stores, or who run WeChat inside the kit makers' own container app. The kit's Telegram part matches Baohuo, a backdoor that Doctor
Hacker & Security News
@hacker.at.thenote.app

Best Phishing Simulation Tools for Realistic, Role-Based Attack Scenarios Compare six phishing simulation platforms for role-based security training, adaptive campaigns, realistic scenarios, employee learning, and campaign management. #hackernews #news

hackernoon.comBest Phishing Simulation Tools for Realistic, Role-Based Attack ScenariosCompare six phishing simulation platforms for role-based security training, adaptive campaigns, realistic scenarios, employee learning, and campaign management.
Hacker & Security News
@hacker.at.thenote.app

PHP2Shell security flaws now sucessfully exploited in the wild Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild. [...] #hackernews #news

bleepingcomputer.comPHP2Shell security flaws now sucessfully exploited in the wildTwo critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild. [...]
Hacker & Security News
@hacker.at.thenote.app

Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in sessions and then replay the sto… #hackernews #microsoft #news

thehackernews.comMicrosoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 OrganizationsCybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in sessions and then replay the stolen tokens to break into email accounts at 79 organizations. Huntress, which observed the activity between July 14 and September 22, 2026, said it detected 497 successful Microsoft 365 sign-in events across
Hacker & Security News
@hacker.at.thenote.app

From a Domain to an Identity Lead: Following the Advertising Trail Learn how Tushar Karumudi uses shared advertising IDs, archived webpages, and corporate records to trace suspicious domains and uncover identity leads. #hackernews #news

hackernoon.comFrom a Domain to an Identity Lead: Following the Advertising TrailLearn how Tushar Karumudi uses shared advertising IDs, archived webpages, and corporate records to trace suspicious domains and uncover identity leads.
Hacker & Security News
@hacker.at.thenote.app

Why We Built a Screen-Free Smart Ring After Reaching 10M+ Users with a Bible App Discover why Elah built a screen-free smart ring after reaching 10 million Bible app users, combining physiological sensing, prompts, and faith-based support. #hackernews #news

hackernoon.comWhy We Built a Screen-Free Smart Ring After Reaching 10M+ Users with a Bible AppDiscover why Elah built a screen-free smart ring after reaching 10 million Bible app users, combining physiological sensing, prompts, and faith-based support.
Hacker & Security News
@hacker.at.thenote.app

Anthropic reveals how Claude Mythos 5 crossed security testing boundaries Anthropic says Claude Mythos 5 targeted real developers with fake identities to push malicious code during a security test. A cybersecurity test is supposed to measure what an AI model can do w… #anthropic #claude #hackernews

securityaffairs.comAnthropic reveals how Claude Mythos 5 crossed security testing boundariesAnthropic says Claude Mythos 5 targeted real developers with fake identities to push malicious code during a security test. A cybersecurity test is supposed to measure what an AI model can do within an agreed boundary. In one UK AI Security Institute evaluation, Claude Mythos 5 crossed that boundary, targeted a real GitHub project and […]
Hacker & Security News
@hacker.at.thenote.app

Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub Actions logs, which the attackers then download before deleting the runs.… #hackernews #news

thehackernews.comGheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions LogsAn automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub Actions logs, which the attackers then download before deleting the runs. The attacks have succeeded in private repositories and GitHub Enterprise environments, according to an analysis by cloud security company Wiz. A GitHub safeguard that pauses
Hacker & Security News
@hacker.at.thenote.app

Witness: Open-source framework for verifying how your software was built Witness is an open-source command-line tool that records how software gets built, signs that record, and checks it against a policy before the software ships. TestifySec built Witness and donated it to the i… #hackernews #news

helpnetsecurity.comWitness: Open-source framework for verifying how your software was builtWitness is an open-source command-line tool that records how software gets built, signs that record, and checks it against a policy before the software ships. TestifySec built Witness and donated it to the in-toto ecosystem within the Cloud Native Computing Foundation, and an open community now maintains it. A compiled binary doesn’t say which machine built it or what code went in. Witness lets a team check which command produced the file, which materials went …
Hacker & Security News
@hacker.at.thenote.app

AI slop is piling up highest on the biggest open-source projects The maintainers of large open source projects are taking the worst of the AI slop. In a Linux Foundation survey of 234 open source contributors and maintainers, people running projects with more than 50 contributors… #hackernews #news

helpnetsecurity.comAI slop is piling up highest on the biggest open-source projectsThe maintainers of large open source projects are taking the worst of the AI slop. In a Linux Foundation survey of 234 open source contributors and maintainers, people running projects with more than 50 contributors estimated that close to a third of the code changes landing in their queue are low quality or AI-generated. Those maintainers now worry more about burning out than about the code itself. Across all projects, the estimate comes to about …
Hacker & Security News
@hacker.at.thenote.app

Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware A malicious instruction file sitting in a developer's Downloads folder tried to make their AI coding agent install a known-malicious npm package, security firm Forever Security said in a rep… #hackernews #news

thehackernews.comMalicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing MalwareA malicious instruction file sitting in a developer's Downloads folder tried to make their AI coding agent install a known-malicious npm package, security firm Forever Security said in a report published last week. The company caught the attempt on a real customer's machine and stopped the agent before any code ran. It could not determine how the file got into the folder. The file
Hacker & Security News
@hacker.at.thenote.app

Product showcase: Stellar Cyber’s ISOC platform provides full-cycle architecture An AI SOC that starts with somebody else’s alert is already too late. Stellar Cyber collects and normalizes telemetry, detects suspicious activity, correlates evidence, builds cases, investigates inc… #hackernews #news

helpnetsecurity.comProduct showcase: Stellar Cyber’s ISOC platform provides full-cycle architectureAn AI SOC that starts with somebody else’s alert is already too late. Stellar Cyber collects and normalizes telemetry, detects suspicious activity, correlates evidence, builds cases, investigates incidents, triages findings, and drives response from the same security architecture. That gives people and AI access to the evidence behind the alert – not just the alert itself. Full-cycle security operations means the data, detections, context, investigation, decisions, and response remain connected as an incident moves through …